Behavioral task
behavioral1
Sample
2e9119617a511d844d13ec2d738438457e76804135cb3c4ea60e208fab1caeda.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2e9119617a511d844d13ec2d738438457e76804135cb3c4ea60e208fab1caeda.exe
Resource
win10v2004-20230220-en
General
-
Target
2e9119617a511d844d13ec2d738438457e76804135cb3c4ea60e208fab1caeda
-
Size
71KB
-
MD5
4f4d6980107e1fbda3c52ce7a5e18be5
-
SHA1
03948c343093a2d3e6587527c06eace940c63252
-
SHA256
2e9119617a511d844d13ec2d738438457e76804135cb3c4ea60e208fab1caeda
-
SHA512
715dac3a523da96c39f35016f3bc87eab1cb0a9b028c5b84c152a13658f3cf7ca3c811f03e9bf76ca345abe2667bd018ed43d2d306f9c9990cc1593ab400c189
-
SSDEEP
1536:EQ1EivoXsx4YaQ2G8W7f+5J9xjLYsCAuK+gSq69zK7odO:EQ+i6seY92G8W7mLjzClKqq6VD
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
2e9119617a511d844d13ec2d738438457e76804135cb3c4ea60e208fab1caeda.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ